s4-auth: Use sizeof() rather than a fixed constant in memcmp() call