s4:auth: Check that the PAC is not NULL before dereferencing it