Simple, so don't forget that about the 403 Forbidden HTTP status code desire
From RFC 9110 about HTTP and 403
'An origin server that wishes to "hide" the current existence of a forbidden target resource MAY instead respond with a status code of 404 (Not Found).'