Hi Zsolt,
Thanks for v3.
I would keep the generic message. It is the same string auth_failed()
uses for a bad token. So the client cannot tell a removed validator
from a normal failure, which I think is also what Daniel wanted from
COMMERROR.
Thanks,
Shihao