Fix encoding/parsing of multi-byte BER lengths
We can't canonicalize a name using SPNEGO
Add a thin SPNEGOish layer