Better security, return false from bad authentification