libcli/auth: avoid possible mem leak in read_negTokenInit()