you can think of it, from an application perspective, as a user that can have allow lists disabled or enabled