Defender lockouts HTTP status code and caching

With IP lockouts and 404 lockouts, the Defender's "lockout notification" page is displayed as a "regular page", so it returns standard HTTP 200 status and no headers to prevent caching. With some external caches such as e.g Google CDN that's a problem because the lockout page gets cached.