Redo the auth mechanism behind SASL EXTERNAL to be properly done