Actually, figured out the issue. I run this in the linuxserver docker container, for reference. I wondered why it only happened to a specific file, and after digging into the data directory in my container i discovered the specific file that gave me 403 errors belonged to root instead of the docker container user.