This is misleading. What's the point of a 403 status code then ?