I’d accept this as an answer if I received a timeout or a message to say that.

Permission denied is something altogether because it implies the request reached an authorisation system, was evaluated and denied.

Fail-secure + no separate error for timeouts maybe? If the server can't be reached then it just denies the request.