Please extend apps.yml to permit per-application "access denied" contact instructions.

[floatingatoll]

As described in mozilla-iam/sso-dashboard#379, it is necessary for us to provide application-specific "access denied due to non-membership in required groups" messaging for some of our applications. This will require extending the apps.yml format and documentation to incorporate a new per-app optional key specifying the correct messaging when the default is inappropriate. As we store apps.yml in a separate repository, this issue is opened to ensure that the work is tracked appropriately across all repositories involved in this business process change request.

[floatingatoll]

mozilla-iam/auth0-deploy#379 implements (for one application) support for a full http redirect rather than just modifying the email address shown when access is denied.