Issue 5: Well, let's return a Forbidden, too.