Currently dbauthz returns sql.ErrNoRows to maintain backwards compatibility. It is no longer an experiment, and this error hides actual unauthorized errors. This should be fixed, and return the proper error.