What are the cases where an ICAP REQMOD does NOT support 'fail_open'?