s4:rpc_server: tell the gensec layer that we want to do header signing

Note: header signing is still off by default, as the gensec backends
      don't support it together with seal yet.

metze

source4/rpc_server/dcesrv_auth.c

@@ -95,6 +95,10 @@ bool dcesrv_auth_bind(struct dcesrv_call_state *call)
 		return false;
 	}
 
+	if (call->conn->state_flags & DCESRV_CALL_STATE_FLAG_HEADER_SIGNING) {
+		gensec_want_feature(auth->gensec_security, GENSEC_FEATURE_SIGN_PKT_HEADER);
+	}
+
 	return true;
 }