EXTERNAL is always offered for C2S sessions

Description

Possibly introduced by #633, even C2S sessions with no TLS are offered EXTERNAL. Swift, at least, uses this by default, and so does not authenticate anymore.

Environment

None
Fixed

Assignee

Dave Cridland

Reporter

Dave Cridland

Labels

None

Expected Effort

None

Ignite Forum URL

None

Fix versions

Affects versions

Priority

Major