Just an idea:

The ability to have custom messages per role. For example if "Boss" was required you could have a custom message on the denial page saying the "boss" role is required and how to get it.