How and when to use authentication exceptions.