Re: Suppressing Exceptions in xarSecConfirmAuthKey()

After committing the change

http://mt.xaraya.com/revision/info/d45198a0da4983ec3b2a593db1731951814d6f1d

Marc posted in xaraya.mt-notices:

> It's really none of my business, but this doesn't seem like a particularly
> good idea. It seems to subvert the purpose of the xarSecConfirmAuthKey()
> function. Does it make sense to change the API for this?

Thanks for your answer. Kris described a scenario where a false returned from
the function is better than an exception.

We thought that this change does not affect security. And I still can't get it
why this change does harm something.