selftest: s3: add a test for spnego downgrade from krb5 to ntlm