The deny list is an enterprise (TLS) tier feature. The non-TLS agent
does not understand denied_endpoints, so a config with only
denied-endpoints set was treated as block with an empty allow list,
blocking all egress for the job. Gate deny-list mode on the TLS check
and ignore denied-endpoints with an info message when the org is not
on the enterprise tier.
Varun Sharma
0f37afa338