Well, both client and relay need to know about the NIP-42 flow 🤔 If the relay issues an AUTH challenge and the client doesn't know what do with it, it won't get the protected notes.