This allows users to set both allowed and server mechanisms and lets hasl

determine which to use, preferring allowed over the server advertised ones.

Ran the new tests under valgrind and called in the turtles for the rest.