Extract forbidden response
Use higher-level tests for forbidden responses