We want the ability to add a manual step when a request is cancelled. We
need this particularly when the request is cancelled in the middle of
fulfillment. This ability will ensure we maintain compliance, for
example no access was improperly granted,...