2 ms·

I guess I must be missing something -- why would you ever want the client to specify auth mechanisms to the server at all?