If we want to match the behavior of the real APNs gateway, we can't really introduce new rejection reasons. I'll admit that I haven't tested all of these failure modes to see which error code the real gateway sends, though.