Interesting....I learned a lot of new stuff, but in the end Roundcube has it's own imap functions instead of using the ones built into PHP and they don't support GSSAPI so I don't see anyway to do this short of an ugly hack.
The ugly hack would call for you to extend the HTTP authentication module and modify it to detect when someone has logged on via pubkey...then use the imap_connect event to change the userid/password from the userid for the specific user, to a system userid that has access to everyone's mailboxes.
The best way to do this would be to extend the imap functions to support gssapi when authenticating. But that would require hacking the source files.
List info: http://lists.roundcube.net/dev/ BT/aba52c80