We *could* send an "invalid request" response here… probably best to fail quietly though.