gss: harmonize negState with RFC 4178