s4-gensec: zero the gssapi_state