Comment by orf

That just turns a credential leak into a denial of service - one that can be triggered from anywhere.