We need the errata tool to be able to waive results on people's behalf (because of the kerberos in openshift issue).

We should have a list of usernames kept in the config file that have the proxyuser ability.

If a new waiver comes in from a user with that ability, and if they specify they want to proxy as someone else, they should be able to.

Any outgoing fedmsg messages about the new waiver should probably include a new field indicating who the real source was (errata tool) even though the waiver is being saved as if it was from a real user.