Optional run sub-stage allowlist

Establish optional configuration 'auth.run_stage_allowlist' that can be used to explicitly allow only select stages. When a stage is encountered that is not allowed the stage will be skipped with only a warning to the user.