Additionally, we should only return 403 if the image is visible to the user. 404 is still appropriate if the user can't see the image
Additionally, we should only return 403 if the image is visible to the user. 404 is still appropriate if the user can't see the image