...
[14:13:53 CST(-0600)] <serac> Sure, so we could use the Message type here, but the method should be getWarnings() or similar.
[14:15:01 CST(-0600)] <serac> Big question: how pass warnings back from authentication handlers with existing api?
[14:15:12 CST(-0600)] <serac> Exceptions are pretty clear; warnings no so much.