This is an alternative approach to https://gitlab.winehq.org/wine/wine/-/merge_requests/8114. Once this is accepted SECBUFFER_STREAM could be used for for Kerberos/DecryptMessage() in libs/ldap.
-- v7: kerberos: Add support for SECBUFFER_STREAM to SpUnsealMessage().