Currently, the WASM extension responds to every invalid request with Access Forbidden error, this includes Invalid Mapping Path, Invalid metric, Invalid delta, Invalid credentials, No Credentials etc.

I think it would a good idea to change the error messages so it is clear where the problem is.