auth/credentials: make sure cli_credentials_get_nt_hash() always returns a talloc...