issue an error for bad request
Many different issues end up here, so message is generic 404. This keeps us from leaking info by probing