If you use cPanel, then you are not allowed to define an error_document for 403, because 403 means that access to any source is prohibited and therefore also to a custom error_document. That sounds paradoxical, but it is true. The cPanel configuration expects a 403.shtml in the document_root...