The listener is triggered _AFTER_ catching the exception here, so that part is already OK. What is to be defined here is if you want to replace the response content, since it may contain information that the client is not authorized to obtain.