An APIUnauthorizedException could occur legitimately - the calling user may be legitimately blocked from access. I'd say that's an uncommon use case so it's worth noting, but I wouldn't want to log an error for something that may be intended by design. Thoughts?