sasl: Don't choose OAuth 2.0 if mechanism not advertised

Regression from commit 9e8ced98 which meant if --oauth2-bearer was
specified but the SASL mechanism wasn't supported by the server then
the mechanism would be chosen.