Use SASL-IR if available

Send "initial response" in SASL authentication if the server supports
it.  Hack bic--send to not log passwords in the clear in the
transcript.