Does this mean anything for 410? If a resource used to publicly exist and is removed, the correct code to return would be 410 Gone rather than 404 Not Found. But theoretically, maybe someone wants to keep the resource available for authenticated requests?
Potentially all non-Auth related 4xx error codes - if you put the necessary headers on it, you suggest things might change after auth, and a login attempt is worth it?
Does this mean anything for 410? If a resource used to publicly exist and is removed, the correct code to return would be 410 Gone rather than 404 Not Found. But theoretically, maybe someone wants to keep the resource available for authenticated requests?