sasl: use C99 boolean in may_authorize()