They may deny requests that are excessive, burdensome, impractical, jeopardize security, risk privacy of others, or are fraudulent or abusive. Denials must cite reasons.