Ignore my previous reply.  Hue will no longer be able to authenticate with the Oozie server after making the above changes in a secured cluster.

Since I am accessing Cloudera Manager using a browser on a Windows laptop, what I ultimately had to do is configure Kerberos authentication for Windows, as described in Appendix A of the following guide:  http://www.cloudera.com/content/cloudera-content/cloudera-docs/Connectors/PDF/Cloudera-ODBC-Driver-f...

Once I was able to obtain a ticket from the Hadoop cluster's KDC on my Windows laptop, I configured Firefox according to the following:  CDH 5 Security Guide - Using a Web Browser to Access a URL Protected by Kerberos HTTP SPNEGO

In addition to these instructions, I also had to set network.auth.use-sspi to 'false' for Firefox.