Fix error message.
That wasn't actually a security hole...