Backport of 05467943 from master. Added a paragraph on how to use the PermissionDenied exception to create a 403 response and use handler403.