" directive within the OHS server configuration scope.3. If the "Deny" directive within the "" directive is omitted or is set improperly, this is a finding.