Give other ClientAuthentication_hooks a chance to run first

It seems like other ClientAuthentication_hooks may want to log or do
something like that.  Considering this hook is more likely than most
to terminate execution, give everything else a chance first.