Challenge-based authentication mechanisms should implements a different interface