auth/gensec: make sure there's only one pending gensec_update_send() per context