Function safe_error 

fn safe_error(body: &str, fields: ErrorFields) -> String

The server’s own error text and nothing else. Vaultwarden states an API refusal in message, Rocket’s catcher nests its reason under error, and the identity endpoint uses the OAuth error pair. A body that does not parse contributes nothing.