diff --git a/irc/accounts.go b/irc/accounts.go
index f34acde1..f5ceb757 100644
--- a/irc/accounts.go
+++ b/irc/accounts.go
@@ -1407,9 +1407,7 @@ func (am *AccountManager) AuthenticateByCertFP(client *Client, certfp, authzid s
 			AuthScriptInput{Certfp: certfp, IP: client.IP().String()})
 		if err != nil {
 			am.server.logger.Error("internal", "failed shell auth invocation", err.Error())
-			return err
-		}
-		if output.Success && output.AccountName != "" {
+		} else if output.Success && output.AccountName != "" {
 			clientAccount, err = am.loadWithAutocreation(output.AccountName, config.Accounts.AuthScript.Autocreate)
 			return
 		}