SimpleCredsAuth is a bit inflexible and only supports checking of a single uid or gid. Access is allowed if user has either uid or gid as effective uid/gid. It would be rather simple to expand SimpleCredsAuth to support multiple uids and gids easily and have additional flag to switch from OR to AND. Access rule would be:
cred_euid in uids or cred_egid in gids
or
cred_euid in uids and cred_egid in gids
Perhaps a ExtendedCredsAuth class?