Does this mean we're going to get the user to generate two keypairs? First one will fail because they're not authed, then they'll go through authentication, return here, and then succeed?