CVE-2016-2110: auth/ntlmssp: maintain conf_flags and required_flags variables