auth/gensec: don't allow gensec_update[_ev] to be called on a subcontext