CVE-2026-27447: fix authorization bypass in cupsd by replacing case-insensitive
username comparisons with byte-exact strcmp against pw->pwname; also include
upstream follow-up commit 849fba7d ("Fix unauthenticated print policies",
Issue #1557) to restore behavior for CUPSDAUTH_NONE policies with named ACLs