auth/spnego: split out gensec_spnego_update_{client,server}() functions