[daveid]

OK, 401 makes more sense in that context. But another 403 case would be "the authorized user lacks permission to open resource."