[NEXUS-6127] record priv/role lookup failures in response