Would rather check for concrete errors on specific attributes. Rationale: the record could be invalid for various reasons, not necessarily because the password confirmation is not right.