An AI might tell you to use a 403 for insufficient privileges instead of 401.

You are absolutely right, let me fix that.