fix(resilience): recoverable 403 for no-credential providers (#6315). Integrated into release/v3.8.47.