SPNEGO SMB signing is now fixed for NTLMSSP, with kerberos to follow shortly.