rfc5802: Salted Challenge Response Authentication Mechanism
This is better than #1660.
this ticket has been moved to: https://github.com/Xpra-org/xpra/issues/1771