correctly filter on mechs
acceptor creds need hostbased service
preserve name type directly