Check if the user is actually autnenticated.... this is weirdly difficult with paramiko.  Since the user gets to control which authentication methods to try, he can always try none, and nothing will fail.  So at some point we need to make the user pay the piper.  Do it in the channel request portion of the handshake protocol....