Decline the handshake with response (← Starlette's send_denial_response): the client gets
its status, headers and body instead of a WebSocket. That takes ASGI's
websocket.http.response extension; a server without it is sent close code 1008 instead,
which it answers with 403. After accept there is no handshake left to decline, and the
connection is closed with 1008.