Now in world.

About ARC4: SMSG_AUTH_RESPONSE is *always* encrypted, even if auth fails.