auth/spnego: let gensec_spnego_parse_negTokenInit() require client provides mechs