s3:smbd: calculate the negprot signing flags from the signing_state