separate {init,accept}_sec_context into gss_/gssEap pattern