In https://gitlab.com/gitlab-org/gitlab/-/merge_requests/25936
we align the return code for the same error to be 403.

Nevertheless, it seems the internal API needs it to be
401, otherwise, the custom error message won't be shown.