auth/spnego: move SERVER gensec_spnego_create_negTokenInit() handling to the top