s4:auth/ntlm: introduce auth_check_password_next()