libcommon: don't use a bound session if we have no shared secret

There is no utility to a bound session with an empty secret, so don't
bother creating one.

Signed-off-by: James Bottomley <James.Bottomley@HansenPartnership.com>