auth3: Use talloc_move instead of _steal