@Mattijah When designing an API, in my opinion, it's better to be through than to lack features. This is completely backwards compatible, includes a test case and has no performance implications, so why not add it?

It solves a real problem for me. It allows my API users to differentiate between auth needed (401) and auth wrong (403).