Bring back authentication through SASL EXTERNAL

(and only update the ssl context before it gets used)