But it can happen in the course of normal operations.  Just shouldn't see a lot of these in the logs.  Kind of like the administrator getting an error log message that someone typed an invalid password.