auth/spnego: split out a gensec_spnego_server_negTokenInit() function.