Yes it makes this very awkward. There is also nothing in the NIP to tell clients or relays how to address the “lost” REQs in this race condition.
#[4] and I petitioned for an optional auth header on connect to make the flow much easier for private relays. It was rejected pretty aggressively and we were told NIP-42 is easy and clear. 🤷♂️