the authorization user should only be communicated during the end of the SASL authentication exchange.