s3:SMB2-BASIC: use smbXcli_negprot() directly