As far as I know, there isn't a way to do that.
What if you had your web service return a 401 requesting authentication (I'm not quite sure how it would be formulated) if the HTTP request didn't contain the Authorization header? That might cause InfoPath to prompt the user for authentication.