SPNEGO has no entry point for gss_inquire_cred_by_mech, so we produce a GSS_S_BAD_BINDINGS error if an application tries to inquire a cred by that mechanism. The implementation should be straightforward, albeit annoying similar to the inquire_cred code.