handle EACCES errors as forbidden