Seems like this would be smart for private relays (e.g. company internal relay). You wouldn't even want to open the socket unless the user had auth'd, probably with a challenge-response or something.

Unless that already exists and I just missed it.