Better error checking for "shadowread" authentication