If an attacker has a key, this generic exception would only amount to a minor inconvenience. Is this in case the attacker gets a hold of the log generated by the user?