- name: cloudflare-workers
  expression: >
    "Cf-Worker" in headers
  action: DENY