a semi-related fun fact I learned a few days ago: until June this year, the stock firmware that shipped with all avaya hardware PBX units
preferred ident over key auth, so not only was there a 3 sec delay for every session while it tries to contact an ident server, if you set up an ident server to respond with the "correct" user ID then it would skip key/challenge auth entirely and just let you in