This way we get proper error handling if the DH group the peer requested is not actually supported for some reason (otherwise we'd just retry to initiate with the configured group and get back another notify).