Introduce setting "desired" for 'smb encrypt' and 'client/server signing'