Make all classes extendable (i.e. non final, without non public constructors) to simplify customizations

[bedrin]

Also expose all private fields via getters where applicable, for example in SunJaasKerberosTicketValidator