BC-1593 better logging when invalid credentials