Good News!
Starting with kafka-3.x GetOffsetShell can work with SASL. SASL configs are passed by --command-config option.
GetOffsetShell
--command-config
Look source code on github: GetOffsetShell.scala