Was that package really intended to be a security feature? To me that seems like a low effort way of landing a contract with an over-specific requirement. But security practices used to be way different so that explanation is also plausible.
It was one feature of a security package. I honestly don't recall the name. I should clarify that I'm talking about error messages one might see during login. Not system-wide/post-login error messages. Looked like an IBM login but got you into an HP.