We should document the change to authentication handling in
HBASE-16231 in the upgrade section of the reference guide.
It's surprising to folks that have existing automated testing that's been working on our prior stable release lines. We should give a warning to those updating. The release note is probably suitable for a first pass.