diff --git a/server/auth.go b/server/auth.go
index e97dcb8867..23564312a0 100644
--- a/server/auth.go
+++ b/server/auth.go
@@ -279,7 +279,7 @@ func (s *Server) configureAuthorization() {
 	// Check for server configured auth callouts.
 	if opts.AuthCallout != nil {
 		s.mu.Unlock()
-		// Make sure we have a valid account and auth_users.
+		// Give operator log entries if not valid account and auth_users.
 		_, err := s.lookupAccount(opts.AuthCallout.Account)
 		s.mu.Lock()
 		if err != nil {
@@ -290,7 +290,8 @@ func (s *Server) configureAuthorization() {
 			var found bool
 			if len(s.users) > 0 {
 				_, found = s.users[u]
-			} else if len(s.nkeys) > 0 && !found {
+			}
+			if !found && len(s.nkeys) > 0 {
 				_, found = s.nkeys[u]
 			}
 			if !found {