s4:auth/ntlm: allow auth_operations to specify check_password_send/recv()