libcli/security - fix two output format specifiers