What's the rationale behind no longer propagating the error in the event of an authentication failure?