You are right indeed that there's a lot of debug messages there. They will be removed of course.
Good point. Perhaps it would make sense to let the authenticator parameter be a list, and have the function try them all in order?
I don't know. The reason I started all of this was because I could never get gsasl to work properly, so even if I do it I wouldn't be able to test it.
That said, patch does not change any existing behaviour so if gsasl works for you right now, nothing will change.