Unfortunately, I know very little about SPNEGO, the only guidance I can offer at this point is to ask your question on the kerberos mailing list at https://mailman.mit.edu/mailman/listinfo/kerberos