[Security?] throws AuthenticationException for any type, including internal Exceptions

[inoryy]

Down the line message in AuthenticationException is typically handled as form error and displayed as such.

This works fine until a system starts throwing internal, not for normal user eyes, exceptions, which are displayed as is even in production enviroment. Example: PDOExceptions when something goes wrong with saving User entity.