cyrus-sasl: mark as keg-only