This also stops using -1 as auth failed, and moves all failure statuses to positive numbers. It looks like Exiting with -1 ends up setting the status to 255 on exit, but then in the locker, it sees this as 255 and not -1, since things get coerced into 32-bit integers.