We should be logging what exactly happened and make it clear that there was a failure to authenticate. Right now, we're just silently dropping any problems on the floor.