EXTERNAL SASL client and server mechanisms