Improve audit message when authentication or authorization fails. #3563