Merge "Validate omission of expected_error_codes defaults to 403"