So there should be only two returned code, either FAIL (fall through if allowed in config) or OK (terminate)?