security: SPNEGO requires GSS_C_MUTUAL_FLAG