Require a valid signature before issuing a challenge

[ro-tex]

Overview

We don't want to expose whether a certain pubkey is already registered in our system. This means that on challenge request, before checking for the pubkey in the DB, we need to ensure that the caller owns the private key.

Design or Proposal