s3-ntlm_auth: allow ntlm_auth --diagnostics to pass again