Collector 1626: Don't raise Forbidden if we don't know what to do.  Instead, riase Unauthorized if _verifyObjectPaste fails in a way that we understand; let all other exceptions bubble to the top.