accept_sec_context: only destroy request if it is populated
[mech_eap.orig] / NOTES
1 - gss_xxx routines acquire lock, gssXxx don't
2