authorization {
  deny_action = ignore
  no_match = allow
  cache = { enable = true }
}