@joelsdc: regarding the description of the issue - Kamailio doesn't return values for auth-header related variable before authentication is done, they are not set before auth_check()/proxy_authenticate()/... That's because a SIP request can have many Proxy-/Authorize headers with different realm and kamailio has to know which one is corresponding for itself along. Moreover, after authentication is validated, you are sure it a valid username that used a valid password.
@henningw: personally I am not opposing to add it at this stage, if other developers have nothing against. If other developers don't feel comfortable with it, then a solution that can be used now in config is $(Au{s.select,0,@})