don't fail hard if reauth cred generation fails
[mech_eap.orig] / NOTES
1 - gss_xxx routines acquire lock, gssXxx don't
2