s3:tldap: don't use 'supportedSASLMechanisms' and force 'GSS-SPNEGO' instead