I'm not sure I see the benefit of the key-value thing, does any other SASL
mechanism have this? I'm not against it of course, just trying to
understand.
There had been previous discussion of including a timestamp or similar to
prevent replay attacks with SASL-HT is that still being considered? Would be
very nice.