Lets check how other services (e.g. github) react when calling an endpoint with a wrong credentials. I would assume they would error, as the authentication errored.