Don't downcase country name
Allow order denial

This creates a special response state, so we're compensating by
simplifying downstream reporting.