No authentication prompt from the Reach agent after enabling and then disabling decryption