Denied

Add ability to discriminate ECs with a denied access and write them in a separate file.