accept_sec_context: only destroy request if it is populated