s3-auth: session keys in validation level 6 samlogon replies are *not* encrypted.