doc/spec: clarify sasl