Perform the normal risk analysis and return either nocaptcha or a challenge depending on risk and trust factors.