bots:
- name: cloudflare-workers
  expression: '"Cf-Worker" in headers'
  action: DENY