This is easy to see in gossip logs when image loading is turned on. Many 403s, but when you open the url manually it's fine. I think it might be some kind of rate limiting where clients are trying to simultaneously do a lot of calls and something in the stack is deciding that's too many..