send-email: provide whitelist of SMTP AUTH mechanisms