Looks like I found another bug - this time trying to send a PM. Tom and David - sorry for SPAMming you with multiple PMs.
I was using standard editor (not WYSIWYG), and if I included [ Guests cannot view attachments ] in the PM's body, I get 403 error when I hit the the SEND button. Same thing just happened now, when I hit "Post", so I had to remove those words and replace them with an image of the words in order to post this message.