Define AuthErr as one of InvalidCreds, Locked.

Rule show given e, produce:
  Match e:
    When InvalidCreds, Return "bad".