s3:smb2_server: make sure we don't grant more credits than we allow