Is this comment still up-to-date?  If we failed to communicate with the HSS, this should be indicated in the return code, and shouldn't callers always check for this first?