Would be nice if we could give alternate responses on handshake failure (such as a 401 when there is an authorization issue).