Authentication in firebird is performed in a few steps, typically (i.e. in SRP case) more than one. But if one writes plugin which can perform authentication in single step and provide both sides (client & server) with secure crypt keys wire encryption is not started, in case of required encryption connection gets broken.
PS. Such plugin is possible if authentication keys are distributed in advance.