o><code>RequestAuthentication</code></a> respectively. Both new APIs are workload-oriented, as opposed to service-oriented in alpha <code>AuthenticationPolicy</code>.</li><li><strong>Added</strong> <a href=/v1.23/docs/tasks/security/authorization/authz-deny/>deny semantics</a> and <a href=/v1.23/docs/concepts/security/#exclusion-matching>exclusion matching</a> to Authorization Policy.</li><li><strong>Graduated</strong> <a href=/v1.23/docs/tasks/security/authentication/authn-policy/#auto-mutual-tls>auto mutu