If this is an auth failure, and not a 'needs auth' message, we may just want to pass false into scmexception.