Don't leak msg in sspi_send_client_authz_id