* removing extra information from the returned error, to avoid leaking it to unauthenticated requests
* removing extra information from the returned error, to avoid leaking it to unauthenticated requests
* Changelog entry for #10516
* Change the error message in a way that is retains the HTTP status code
* Change changelog file num
* And right back where we started...
Co-authored-by: bruj0 <ramakandra@gmail.com>
