libcli/auth: rewrite schannel sign/seal code to be more generic