Apparently there is a setting in MDaemon to disable APOP/CRAM-MD5 authentication for the SMTP server.
Disabling that option allows eM Client to successfully connect with an app password.