That was the plan. Ran out of time last night.

Things like the 'denied by provider' seem to be possible if using an ldap auth in a particular way but I'm not sure I want to go to the extreme of setting up ldap. Did a search for public ldap directories but i'd be guessing how to interact with them to get the right response.