RequiresAccountConfirmationAttribute takes a user message string, doesn't it? Also, to be properly localizable, the entire string should be one localizable item, instead of String.Formatting together some parts. That way if we end up localizing we don't have to deal with weirdness around languages that separate clauses differently.