I got it now! Change

transport.connect(username=username, password=password)

To

transport.start_client()

resolve the problem. I should not try to connect. This is a ChallengeResponseAuthentication yes setup & my password is part of that process