CXX-310 better filter for SASL