to avoid conflicts with Cyrus SASL 1.x, because the Cyrus SASL API changed realm per smtpd instance, effectively limiting authentication to a single realm..