HTTP Status and Scenario:
400 Bad Request - Malformed request body. A helpful error message is returned identifying the missing or invalid field(s).
401 Unauthorized - API key is missing, invalid, or the client does not have OTV access (enabledOneTimeVerification flag is off, or required Monitor Products are not active).
404 Not Found - The provided id does not correspond to a known OTV subject.
500 Internal Server Error - Unexpected server error. Retry with exponential backoff.
Although the response is a string, it could come back as an array of Strings.