403: Specifying valid qualifications would not grant usage of the source, as the current credentials are currently valid but only would not have authorization. An origin server that wishes to "hide" the current existence of the forbidden target resource May perhaps instead reply with a