It's not very clear for user right now that the token they created is unusable, because no admin configured the authenticator.