Move sftp_state setting outside of the ssh mutexes.

Doesn't hurt anything where they were, but Coverity kinda reverse
suggested it.