When a biometric authentication system rejects a valid user, which type of error is generated?