auth/spnego: split gensec_spnego_server_negTokenInit() into subfunctions