gsasl authenticator: support crypted secrets, server side