Why is SASL enabled by default? It seems that most client/servers out there will (by default esp for anon reads) not use SSL or SASL. Shouldn't it be /off/ by default, and if you want it, turn it on? This is a big point of contention among our IT clients.