When a user is not authorized to call AddClientListener on the cache they receive Infinispan.HotRod.Exceptions.Exception. But calling any other unauthorized operation leads to a more specific exception Infinispan.HotRod.Exceptions.HotRodClientException.
The AddClientListener operation should probably throw HotRodClientException too. This behaviour can be seen in the Java client.