Throw Error instances for access control failures

This gives nice stack traces in server logs