How do you handle a situation where an out-of-the-box Ping Identity product feature does not meet a critical client requirement?