An improvement is to have a “clearer” 404 that distinguish between “it doesn’t exist” and “it’s private”