- added :sasl_opts for extra SASL options (passed to SASL lib)
- improved secure_layer treatment. Now gssapi (krb5) and digest-md5
  works.