410 gone when requesting private `/api` API namespace with 3rd party client ID