A single incorrect password attempt from the user would be tried twice, because the first failed try would think it was the try_discover_key method that failed, and would invalidate that instead of the actual failed password. This resulted in the user being prompted one fewer time than they should be. Fixes #38495