auth: Make more of the ntlmssp code private or static