if the server's device does not match expectedSystemId or expectedSecurityLevel, when either was given