s3-schannel: fix blob length when pulling off a NL_AUTH_SIGNATURE in