[sr-dev] git:master:fc968236: auth: allow challenge from failure/onreply routes