More CB changes: add a req flag for SPNEGO/NegoEx