--- a/plugins/mod_legacyauth.lua	Mon Apr 18 20:38:44 2011 +0100
+++ b/plugins/mod_legacyauth.lua	Wed Apr 20 18:19:28 2011 +0100
@@ -11,7 +11,9 @@
 local st = require "util.stanza";
 local t_concat = table.concat;
 
-local secure_auth_only = module:get_option("c2s_require_encryption") or module:get_option("require_encryption");
+local secure_auth_only = module:get_option("c2s_require_encryption")
+	or module:get_option("require_encryption")
+	or not(module:get_option("allow_unencrypted_plain_auth"));
 
 local sessionmanager = require "core.sessionmanager";
 local usermanager = require "core.usermanager";