Turns out the 403 was deliberate, lol.