s4-winbind: Correctly reject the unsupported WBFLAG_PAM_AUTH_PAC flag