smbd:smb2: only enable encryption in session if desired