Tag custom http header in istio authorization policy