gsasl authenticator: support client salted-password caching