attribute checks for sasl_auth