In one case, the outgoing stream header includes the wrong domain, which causes an error in SASL EXTERNAL on some servers.