Authorization
The Open Policy Agent server that runs as a part of the Istio system has its APIs protected by Basic Authorization.
The system.authz
policy in the system's bundle controls which Open Policy Agent APIs are accessible. You can view and modify this policy via the UI under system/authz/authz.rego
like you would any other policy.