def rule(event):
    if event.deep_get("responseStatus", "code", default="") in [401, 403]:
        return True
    return False
