Currently an unauthorized attempt at invocation at the server returns aSecurityException wrapped in a RemoteException wrapped in a ServerExceptionto the client.Wouldn't it make more sense to have the client recieve theSecurityException?