don't log here
Reject if file could not be fetched
pass auth around