rpcgss: krb5: sanity check sealalg value in the downcall