This is because most of instances are using Mastodon, which has no “private” setting. My instance runs on Pleroma, and is set as privte. So Maven tried to harvest, and got 401. This is what happens when you use a software which is not interested in granting security features.