acceptor should not advertise auth schemes the initiator cannot support