same here, can't this just be `E_UNAUTHORIZED` ?