Make every request follow your rules.
Allow, block, rate-limit, or challenge incoming requests with policies you can inspect.