$ kubectl apply -f client-echo.yaml && kubectl -n istio-vt-t59 wait --for=condition=Ready pod/client --timeout=90s
pod/client configured
deployment.apps/echo unchanged
service/echo unchanged
pod/client condition met

$ kubectl -n istio-vt-t59 exec client -c curl -- curl -s -o /dev/null -w 'no_allow_policy=%{http_code}
' http://echo.istio-vt-t59.svc.homelab.local/anything
no_allow_policy=200

$ kubectl apply -f unrelated-allow.yaml
authorizationpolicy.security.istio.io/unrelated-allow created

$ sleep 5

$ kubectl -n istio-vt-t59 exec client -c curl -- curl -s -o /dev/null -w 'after_one_unrelated_allow=%{http_code}
' http://echo.istio-vt-t59.svc.homelab.local/anything
after_one_unrelated_allow=403