smbd:smb2: only enable encryption in tcon if desired