Yeah just be oblique. Refuse to elaborate as is so often done in the security field. (How many times have you seen a generic "you've been blocked by security" block page on a website? It rarely states the actual reason, just vague "security" when the reason is VPN, not allowing enough spying javascript to run, blocklisted IP address, or an actual manual ban)