I think we need a better exception name. It sounds slightly auth-like.