Looks like I have the default index brute forcing for 403 dir responses working.