Return 403 instead of 401 for EPERM/EACCESS