The exact-echo check used accent-insensitive compare, but the collision suffix path was a case-sensitive startsWith. AuthLoader-3 vs authloader therefore leaked through as a real description.
ata
96cb5b5d95