Until more clients standardize around proper error handling, safest path = return undefined; and log the rejection internally. I'll stop there for now.

Which clients? In my experience almost all clients expect the user to sign everything so as soon as they get a rejection they freeze