alby already handles this and it works, sorta, on coracle

authing is one thing that shouldn't force you to interact every time, you are in, until you are out, almost everything else can be though... alby does distinguish many things, and it definitely separates signing auth challenge events from any other type of event