Parent `ForbiddenHttpException` uses self::ERROR (`'forbidden'`), not accounting for the child class's defined `'access_denied'`.