That's a good idea for privacy. Only use real keys for auth when it's in your configured relay list

well, thats why my auth relays send an auth challenge upon connect. but clients rudely ignore that and insist on being the first to send a message (like an event or req). so, i suppose, clients are what also created this pattern so that now you feel like you have to auth with random key "just to get...