nfsd: protect clid and verifier generation with client_lock