Eloy on Nostr: so we have HTTP status 404 for not found and 403 for forbidden but we commonly need ...

so we have HTTP status 404 for not found and 403 for forbidden

but we commonly need to hide the existence of a resource for unauthorized requests as well...

do we need a combined status code? I quickly looked through the list of status codes and I don't really see a good alternative