smbd: First watch, then defer