If domainkey is wrong can we provide a non-authorized response body?

[MarquiseRosier]

Is your feature request related to a problem? Please describe.
currently if domain key is wrong; here's what we return,

Describe the solution you'd like
if we can give a 401 status code vs a response with a data field in the body of the response, this would be more helpful for consumers of the api!

issue raised by David Barrat of the DAAS team

[dbrrt]

@MarquiseRosier Another note on the domainKey. It'd be a better practice to have it in the headers rather than as a query parameter since as a query parameters, it'll be visible in the query logs.