improve allowlist middleware

Currently, there is an allowlist mechanism that can be set inn the backend, but the message shown to the user can not be configured. It could be useful to have a way to customize the information shown in the CLI to the users so they have clear call to actions, such as following a link to request access.
```[tasklist]
### Tasks
- [ ] support custom message
- [ ] support specific routes
```
