Make sure we can respect the authentication policy failure. like a lockout, and not continue down the chain.