util.sasl.scram: Simplify validation of client-first-message