Use error-code 406 to indicate policy rejection