enable gettokenapps to retrieve a challenge

This is used for the yubikey-luks scenario, where the challenge
would be the password and needs to be passed to the
privacyIDEA server to determine the response.