Enable NTLM only if code is compiled against Heimdal

Make NTLM only work if we are on Heimdal GSS-API implementation which is most true for FreeBSD, etc. otherwise advertise SPNEGO only.
this should be restructured, having two { for one } is not easy to parse