For the security setting, how about this:
Connection type: [Standard connection \/]
TLS if available
Secure (TLS)
Secure (SSL)
Standard Connection/Authentication
I like that term standard for secure authentication since a secure connection is not as common and the word standard doesn't imply anything wrong. If we set it to the default choice it would be what everyone sees and likely wouldn't change for other, more secure and less common authentications.
Authentication type: [Standard (Open Authentication) |v]
Secure (SASL)
Secure (CRAM-MD5)
However for the connection type perhaps we should go with something else besides standard. Not necessarily insecure... Perhaps the key is to make standard, not the default. Maybe something like this? not too happy with it right now...
Connection type: [Secure (TLS if available) |v]
Standard (Open Connection)
Secure (TLS)
Secure (SSL)
The goal should be to select the best option for a secure connection, since our assumption is that it's better and more common, and leave the standard or open connection as an option less appealing.