Add an equivalent of hadoop_subcmd_opts for secure opts

There are only two OPTS vars for security and they are inconsistent. Additionally, if someone adds a subcommand that needs security support, we have no hook to allow for an _OPTS.