The default implementation will display 404 page right away, terminating the program execution.
You may override this method, creating your own deny access handler. While doing so, make sure you
avoid usage of the current requested host name, creation of absolute URL links, caching page parts and so on.