If after filtering we are left with no mechanism names AuthenticationConfiguration.createSaslClient should just return null as no factories should be able to return a mechanism anyway.