Added ability to return optional error messaage from XACML rule