Made it clear that any authentication challenge will continue without credentials if no trusted host is specified