uch that all Citadels share the same root certificate and workloads can authenticate each other across the mesh.</p></li><li><p><strong>Authentication Policy</strong>. We&rsquo;ve created a unified API for <a href=/v1.26/docs/tasks/security/authentication/authn-policy/>authentication policy</a> that controls whether service-to-service communication uses mutual TLS as well as end user authentication. This is now the recommended way to control these behaviors.</p></li></ul><h2 id=telemetry>Telemetry</h2><ul><