It maintain the default behaviour (403 error) and give a way to
enhance this behaviour. E.g. redirect anonymous users to a login page.