treat http status 999 as forbidden.