I think we should handle Net::SSH::AuthenticationFailed in Bootstrapper/BootstrapProtocol and raise bootstrap error, we might have similar exceptions for winrm protocol as well.