#23 remove mask when got bad credentials