mod_rayo: insecure dialback implementation - still need to verify server key and verify result