Deny by default

An access-control rule that refuses a request unless an explicit allow policy matches it.