ui/vnc: Convert sasl.mechlist to g_malloc() & friends