We want to make sure that response is consistent so that
we prevent brute force attacks that could expose project
existence