The server side of the mechanism can receive a delegated credential but there is no way to obtain it, we should provide a way for it to be obtained or provided.

Note: This may be an Elytron integration point rather than something supported in the pure SASL mechanism.