I changed it to bad_request/eperm, which is the most generic we have.