- backport a fix to make handling of returned flags during spnego
        credential delegation more forgiving of apps which don't care about
        flags but still want a delegated credential handle (#314651, RT#5802)
    - fix retrieval of krb5 credentials from an spnego delegated handle
        (#319351, RT#5807)