knfsd: nfsd4: return nfserr_wrongsec