smtpd_tls_security_level encrypt or may ?

[Per Jessen]

I'm trying to setup an SMTP service on port 587, TLS required,
authentication in plaintext allowed. 

What I can't understand is the following:

with smtpd_tls_security_level=encrypt, the SMTP server does not offer
any AUTH options.  With smtpd_tls_security_level=may, I get what I
want:

250-AUTH PLAIN LOGIN DIGEST-MD5 CRAM-MD5

I also have smtpd_sasl_security_options=noanonymous. 

This is with postfix 2.6.2+cyrus. 


/Per Jessen, Zürich