SPNEGO mechanism (and its factory) should accept a GSSManager parameter whose default value is GSSManager.getInstance().
See org.wildfly.security.sasl.gs2.Gs2SaslServerFactory for reference.

Requested by dlloyd@redhat.com in one discussion:
https://github.com/wildfly-security/wildfly-elytron/pull/534#discussion_r85996276