Block a user
Sharden tasks into milestones
Restrict egress to certain namespaces
Istio proxy-sidecar Endpoints
Restrict egress to certain namespaces
SSL termination from the sidecar itself
Single service, various pods with different ports