gss: don't explicitly reorder krb5 to front of spnego