s4-auth: Always talloc_zero() the struct auth_session_info