With the addition of the Kerberos authentication plugin one might want to do the connection encryption there too. On the other hand, current SSL connection encryption offers some kind of authentication as well.

This makes it two "connection encryption plus authentication" solutions.

To support that we'll need connection encryption plugins.