Correctly identify invalid auth keys