Make defaults sane for the lockoutable smb_login

See #2376
Land #2466, don't try to lockout SMB