no challengresponseauth (pubkey only)