The attached patch was written as part of work implementing GSS-API
authentication. We actually might not end up using
SSLAuthenticatorWithFallback to interpret the authentication data
but I think this refactor is worthwhile on its own, so here's the
patch.
Cheers,
Fraser