Can you clarify? What else do you think we should check.

If its not a security negotiation message and we are expecting one the message ends up being ignored. As the comment states in the ConnectionManager code, we could enhance this to send a message back to the client for them to do something smart, like possibly retry if somehow the message got corrupt.