Details included in the SystemAccessRequired error response.SECURITY NOTE: The email and display_name fields are safe to include because the caller already proved ownership of this identity through OAuth. We are reflecting the caller's own profile back — not disclosing another user's information. Do not add fields that reveal other users' data.