g>Identity Provisioning Through SDS</strong>. Added SDS support to provide stronger
security with on-node key generation and dynamic certificate rotation without
restarting Envoy.</p></li><li><p><strong>Authorization for TCP Services</strong>. Added support of authorization for TCP
services in addition to HTTP and gRPC services. See <a href=/v1.20/docs/tasks/security/authorization/authz-tcp/>Authorization for TCP Services</a>
for more information.</p></li><li><p><strong>Authorization for End-User Groups</st