add ability to use custom message for grant denial