Due to an issue with Openshift Service Mesh, currently, the WASMPlugin is also applying to Outbound traffic (e.g. any request made by the protected pod), which means that with authorities set to catch-all (e.g. the configuration we recommend in the documentation), any request made outside the pods that are targeted will require authenticating with 3scale, even if that does not make any sense.