negative SASL errors are fatal