We need to investigate a case where a jstestfuzz was able to send a request to the server with `fire-and-forget` and a malformed security token.

This resulted in a response being generated and handled when it shouldn't have since `fire-and-forget` tells us the client is not expecting any response.