[29ebJCyy]

Technically it should be a 401. Tsk tsk IncreasePosts.

[__float]

It's common (see: S3, private GitHub repos) to return 404 instead of unauthorized to avoid even leaking existence of a resource at URL.