DecisionReason:
    | "allowed"
    | "no-policy"
    | "policy-expired"
    | "unknown-source"
    | "unknown-destination"
    | "revoked-source"
    | "no-matching-rule"
    | "outside-window"
    | "source-not-enumerated"
    | "lease-expired"
    | "unclassified-destination"
    | "egress-guard"