Ensure that invalid credentials is not confused with generic invalid request, refs T243