Passport strategy for pubkey auth - successful decryption of an encrypted challenge demonstrates ownership of a public key