Properly reflect MS krb5 mech OID in SPNEGO acceptor

These commits fix issue #7858 and add an automated test.