The text 2bc0a19d5a9a, as Debian 10 (Buster) shipped it.
Cyrus SASL documentation
sasl_checkapop(3) on Linux now