#209584 by Rob Loach: 404/403 validation is also done in runtime so to allow more flexibility here, remove the submission time validation