Currently it's set to no. It would make more sense (and cause less questions to #samba) if server signing were set to auto by default.
maybe for 3.1. Too big a change for 3.0. Will revisit this later.