s3-dcerpc: add sign/seal support when using SPNEGO/KRB5