Authentication errors that are returned to client mention lines of code. We should probably use a debug flag whether to determine when to produce detailed error info or just a summary of it.