You can narrow the scope of this and now throw AuthenticationException, right?