Things would break if the security result and security reason did not arrive in the same WebSocket message.