Conditional SASL authentication