The session key in NTLMSSP AUTH blobs is actually an empty string.