add support for encrypted shuffle

Currently Shuffle fetches go on the clear. While Kerberos provides comprehensive authentication for the cluster, it does not provide confidentiality.

When processing sensitive data confidentiality may be desired (at the expense of job performance and resources utilization for doing encryption).