ui_config { enabled = true } acl { enabled = true default_policy = "deny" }