Remove TODO #15: Block untrusted CGI requests to sensitive pages with status code 403