OCSP Auth Rule

I have taken the default ocsp authentication rule to add an HTTP::respond when client certificates do not authenticate. I have set up a couple log statements to see when the different events are accessed. The rule runs fine and alway returns a value, but rarely makes it into the authentication error statements, and just drops the connection. However, the process always successfully enters the authentication succeess event and allows traffic. Has anyone run into anything like this before?