><strong>Added</strong> <a href=/v1.9/docs/tasks/security/authorization/authz-deny>deny semantics</a> and <a href=/v1.9/docs/concepts/security/#exclusion-matching>exclusion matching</a> to Authorization Policy.</li><li><strong>Graduated</strong> <a href=/v1.9/docs/tasks/security/authentication/authn-policy/#auto-mutual-tls>auto mutual TLS</a> from alpha to beta. This feature is now enabled by default.</li><li><strong>Improved</strong> <a href=https://www.envoyproxy.io/docs/envoy/latest/configuration/securit