man page says: Possible values are auto, mandatory and disabled. The default is "default" though. It should be changed to "auto".
For SMB2, default has a different meaning than auto.
I have updated the manpage for master to describe the
effects of smb encrypt settings for SMB2.
Will open a bug to backport that.