Don't make the mechanism look for the first "parameter" anymore (since it's now just the first character in the mechanism name)
Implement the DH-AES mechanism for SASL in DB services