just allow SCRAM-SHA-1 mechanism

These mechanisms are removed:
PLAIN
DIGEST-MD5
SASL-ANON

And the password is stored as SCRAM
(won't allow to store it as plain any more)