In particular, if an exception is thrown from Command::checkAuthForOperation(), we won't log or audit the failure. It seems like the auth code should unify error handling by either converting all statuses to exceptions or vice-versa to ensure uniform handling of failures.