OK
When a REST request returns an error, users should not see potentially exploitable/sensitive information.