error 403 is a more conversative way to handle hotlink, or we may need to deal with caching problem etc.