interpret HTTP 401 or 403 as permission denied