Clients shouldn't wait for auth. Most relays only send auth after we hit something that uses auth-exclusive content. But yes, most authed relays don't do anything without auth, so we auth with whatever and then they reply.. cat and mouse game.