n the <code>v1</code> subset.
However, the virtual service configuration you applied routes traffic to the <code>v2</code>
subset if the header contains <code>end-user=jason</code> and to the <code>v3</code> subset in all
other cases.</p><h2 id=verifying-strict-mutual-tls>Verifying strict mutual TLS</h2><p>Following the <a href=/v1.9/docs/tasks/security/authentication/mtls-migration/>mutual TLS migration</a>
instructions, you can enable strict mutual TLS for the <code>ratings</code> service:</p><pre><code c