SASL problems solved, sort of
I ended up choosing a way that I hadn’t really considered before because it’s so roundabout. The general idea, shown here is that when Postfix receives a request for authentication, Postfix asks Cyrus-SASL, Cyrus-SASL asks PAM, and PAM checks the MySQL database. Why didn’t I think of this before? (Sarcasm)