Usually occurs when other unexpected oddities exist like: - Image storage using local_secure while instance is public. - System images moved to non-public space. But these can be ran into and be annoying. Particularly common if there's no referrer header. Related to #4656