Allow Unspecified 4xx and 5xx Errors

[benno]

The API should explicitly permit the server to return any 4xx or 5xx error, with basic semantics of "the client sent a bad request" and "the server encountered an error". Future minor revisions can then add additional response codes in those ranges without breaking client behavior (though clients should gracefully handle any of these errors anyway).