Why CHAP is Reasonably Secure