Move updating output so we don't potentially leak

If ssh_mac_ctx_init would fail there was a potential memory leak here,
since the *output pointer wouldn't have been updated in that case.