util.sasl: Return proper error when client provides authzid.