Move security check in job_step_signal() up further.

No change in security posture, except that unauthorized users
could generate additional verbose() warnings.