Distinctive authentication codes
A401 on a protected route carries a code when the reason is not simply a bad or
expired token:
See Authentication for how both are enforced.
404 is overloaded: it means either “this object does not exist” or “this endpoint
does not exist in this edition”. Check Editions before
investigating a 404 on billing, usage or MFA routes.