Missing key now gives Forbidden rather than Not found