Harness should provide the ability to block any delegate from operating against our instance if ZTS verification is not configured. This ensures that no delegate can execute tasks without the customer-controlled verification mechanism in place, preventing unverified delegates from bypassing established security guardrails. This should function as an account-level policy that rejects connections or task execution from non-ZTS delegates.