gss: mask out SAnon req_flags after computing session key