s4:netlogon: correctly calculate the negotiate_flags