s4-rpc: be more careful about DCERPC auth padding