Challenge / Response should only be used on plain links, not on tls links

[michaelortmann]

Challenge / Response is used to mitigate sending cleartext passwords when linking bots

But we dont and not use that for tls links, where the whole link is already encrypted