But NIP-11 says

auth_required: this relay requires NIP-42 authentication to happen before a new connection may perform any other action. Even if set to False, authentication may be required for specific actions.

*any other action* - so to support relays that have auth_required=true and don't immediately send the challenge I would have to basically ignore the auth_required field...