make state transition explicit rather than side-effect of GSS status code