- return descriptive error messages when unauthorized to create blob or push a model - display the local public key associated with the request that was denied