Try to implement out-of-spec authentication and watch your logs fill up with bots.