better exception handling, specific status codes for exceptions,
detect access control and not found exceptions more consistently