a uaCert entry in auth_failed().  Put the switch entries into a sane
order, namely the one the enum is declared in.