accept_sec_context: only destroy request if it is populated
[mech_eap.orig] / TODO
1 - integration with initiator-side EAP channel bindings
2 - integration with final supplicant architecture
3 - test Heimdal port