app.src: do not depend on sasl