Perhaps, when the link could be a private repository, the error page should state it's either missing or inaccessible.
All we need is an error code 402.5 "plausible deniability between unauthorized and not found"...
All we need is an error code 402.5 "plausible deniability between unauthorized and not found"...
For the rest of your users it wouldn't hurt to say, "You might see something different if you're logged in." Or if they are logged in, saying, "Were you expecting something different? Maybe you just don't have access yet."