Comment 1 for bug 1936422

Working branch user/jeffdavis/lp1936422-remoteauth-more-error-codes has a first pass at handling "not permitted" and "has penalties" failures separately, but I need to do some testing before adding a pull request.