The status is actually 400, which is also used by other user / input errors. I don't want to accidentally catch those too.