Try setting a global variable in the preauth filter and checking on that variable in your trace filter. I believe that should work.
You can also try the mung-the-header hack. Try something like this in your preauth:
ns_set put [ns_conn headers] x-rejected yes
And then check for that header in your trace.