The previous commit moved every non-missing-header auth failure to debug, which made a mis-pinned authserv_id (the only stamp comes from another authserv-id) drop allowlisted mail silently at default log levels. That is an operator misconfiguration, not routine forgery, so it warns again, with a hint pointing at platforms.email.authserv_id instead of the opt-out.