I understand the need for opacity, but there's gotta be a better developer experience than just "403 Forbidden".