libcli:smb2: Use constant time memcmp() to verify the signature