api client handles 403 statuses
client can return curl command without calling api