s4:auth/gensec/schannel: make a copy of netlogon_creds_CredentialState in the client