auth/spnego: make more use of the 'ta' helper variable in gensec_spnego_update_client()