I am an internal F5 Employee in the Shape division. When we configure the mitigated response we need to have the ability to set response headers such as Content-Type. Without the ability to set these most applications will respond with unknown error instead of whatever we configure in the response body. This feature request will for sure come from customers as they start to onboard their apps in bot defense.