I expect that we'll have 401s also for any methods that require auth.