bots:
- name: cloudflare-workers
  expression: '"Cf-Worker" in headers'
  action: DENY

status_codes:
  CHALLENGE: 401
  DENY: 403