[+] SASL by default, TLS if supported by server