Why would Twitter logging the challenges make the key useless? That data has no value and can't be replayed in a future login attack.