Allow zero length but non-NULL tokens on init_sec_context