* implement SASL OAUTHBEARER and draft/bearer
* Upgrade JWT lib
* Fix an edge case in SASL EXTERNAL
* Accept longer SASL responses
* review fix: allow multiple token definitions
* enhance tests
* use SASL utilities from irc-go
* test expired tokens

Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.5.0 to 0.17.0.
- [Commits](https://github.com/golang/crypto/compare/v0.5.0...v0.17.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

Fixes a socket leak (that doesn't seem to be affecting tilde.town?)

Simplify some of the password hashing logic. This requires a bump of irctest.

* optionally protect against multiple starts with flock

Fixes #1823

* use traditional .lock extension

* move config key to top level

These should have been committed in 8218d1caab
but weren't.

Resolves CVE-2021-42836, which probably didn't affect us, but we might as well
upgrade.

Fixes #1762

Fixes #1733

Potentially fixes the database corruption seen on #1603

Implements #1577, but the issue should remain open until we clean up
the debugging loglines.

Validate tag names and values in accordance with the ratified message-tags spec

These should have been added in 66995cdfdf.
Forgetting this seems to be an ongoing problem.