That line is required, for example, in the "all" policy case when the first credential succeeds and the subsequent ones fail. Line 222 would not be evaluated if the credential fails authentication, and 244 is needed to fail the policy since all credentials were not successfully authenticated. I will add some test cases for this component, including the one I just described, in a subsequent commit.