Produce sensible stream errors on sasl and tls failures

The intention is that this improves debugability on the remote side.
Operators can hopefully see these errors and see that client connections
fail due to STARTTLS or SASL issues.