{
        on_demand_tls {
                ask http://127.0.0.1:3903/check
        }
}

{
        on_demand_tls {
                permission http http://127.0.0.1:3903/check
        }
}

Error: loading http app module: provision http: getting tls app: loading tls app module: provision tls: provisioning automation policy 1: on-demand TLS cannot be enabled without a permission module to prevent abuse; please refer to documentation for details