I do get some refusal from GLM when pentesting my company's site.

But it can still be coaxed to agree though.