Use a status other than 403 to indicate a user error.