sendError now returns less informative forbidden message rather than the exception message.

core/src/main/java/org/acegisecurity/ui/x509/X509ProcessingFilterEntryPoint.java

@@ -57,6 +57,6 @@ public class X509ProcessingFilterEntryPoint implements AuthenticationEntryPoint
     public void commence(ServletRequest request, ServletResponse response, AuthenticationException authException) throws IOException, ServletException {
         logger.debug("X509 entry point called. Rejecting access");
         HttpServletResponse httpResponse = (HttpServletResponse)response;
-        httpResponse.sendError(HttpServletResponse.SC_FORBIDDEN, authException.getMessage());
+        httpResponse.sendError(HttpServletResponse.SC_FORBIDDEN, "Access Denied");
     }
 }