fn refusal(error: Error) -> ClientAuthError
What a failed signature or claim check says, in this server’s words.