Improved details of a ForbiddenException returned to the user and masking in logs.