If we later add HTTP mechanisms we have no way to differentiate between HTTP and SASL mechanism properties.

We could probably share properties and rely on protocol matching in the MatchRule but as a single AuthenticationConfiguration will support both HTTP and SASL I think independent properties will be required.