Is a 403 is actually returned in this process somewhere?  I thought maybe it will be logged in the audit log instead?