public byte[] unwrap(byte[] buf, int off, int len) throws SaslException {
    if (cryptoAES != null) {
      return cryptoAES.unwrap(buf, off, len);
    } else {
      return saslServer.unwrap(buf, off, len);
    }
  }
Release resources used by wrapped saslServer
hbase-server/src/main/java/org/apache/hadoop/hbase/security/HBaseSaslRpcServer.java