s3:auth: pass AUTH_SESSION_INFO_* flags to finalize_local_nt_token()