auth/spnego: add an early return for a hard error in gensec_spnego_parse_negTokenInit()