There is a specific exception type which indicates that a SASL authentication has failed as opposed to a protocol/transit or operational problem. We should use that whenever appropriate.

This means we'd need to add a toSaslAuthenticationException() method to org.wildfly.security.mechanism.AuthenticationMechanismException.