auth/spnego: make use of GENSEC_UPDATE_IS_NTERROR() in gensec_spnego_update_client()