smb2_server: decouple IOCTL check from signing/encryption states