Authentication failed or is required: no credential, or one the server does not accept (HTTP 401). Forbidden is the narrower case where the credential is valid.
Whether the identical request could succeed later without being changed.