It really is a plain-text password.  I had originally misunderstood what the AKA specs meant by "expected response" - not unreasonably I interpreted this as the expected response from the client, but it is actually used as a plain-text password to generate the expected MD5 digest response from the UE.  This is why I ended up not having to make any PJSIP changes at all.