Matching 'Entries' deny access and the caller promises to log the request per the returned log_configs.