pub const DENY_SPEC: PortSpec;Expand description
Restriction and request-shape plugins: a deliberate policy rejection
(IP/UA/referer/consumer/group deny, blocked URI, missing/invalid CSRF
token, oversized body, schema mismatch) exits on denied. Same shape as
AUTH_SPEC but kept as its own const so the description can speak to
policy rejections rather than credentials.