ApiBase defines badaccess-groups as "Permission denied" in English. The UX seems right. If you still think this should be changed, let's talk.