Agree, Alpaca's response does not convince me either, because I have adjusted the end time to 15 minutes before the request time, and the first snapshot returned data. I'd expect that all the requests returned forbidden. I have asked a follow-up question.
