net.box: use authentication method received in IPROTO_ID by default

If the authentication method isn't specified with the user credentials,
the client uses the one received in reply to IPROTO_ID. If it's unknown
to the client, it falls back on AUTH_METHOD_DEFAULT.

A test and a changelog will be added to the Enterprise Edition, which
supports more than one authentication method.

Part of #7989

NO_DOC=ee
NO_TEST=ee
NO_CHANGELOG=ee