auth/spnego: consitently set spnego_state->sub_sec_ready = true after gensec_update_ev()