Add more tests to clarify 401/404 distinction for unmanaged and managed
artifacts with and without authentication