Switch to 400 for lack of events, and 404 when executing unknown commands. And expose do404 as a static class method.

Also, while I'm cleaning stuff up, let's check for a DEBUG env var and
only haemorrage information if that's set.