Although the HTTP standard specifies "unauthorized", semantically this response means "unauthenticated".

The client must authenticate itself to get the requested response.