Just something I cooked up. I realized that sending a challenge/response via encrypted dm gives same or better security assurance than a signed challenge going over the clear.