Removed unused global 'session'

mod_tls: Add <required/> to stream feature when TLS is required

mod_legacyauth: Hide stream feature when secure auth is enabled, and session isn't secure

mod_saslauth: Don't offer bind/session when they aren't authenticated yet :) [thanks albert, again...]

mod_saslauth, mod_legacyauth: Deny logins to unsecure sessions when require_encryption config option is true

xmppclient_listener: A connection is also secure when it uses legacy SSL

net.server: A connection is not secure if we delay the TLS handshake

(0) -1000 -300 -100 -30 -10 -7 +7 +10 +30 +100 +300 +1000 tip

mercurial