Add missing 403 response on `/query/profile`.