tests/krb5: Check that updated NT hashes of gMSAs have the values we expect