A 401 that had nothing to do with authentication — and the Kubernetes network policy that was actually the culprit.