s3:smb2_server: do one central as_root check if the operation requires it