Merge branch 'master' into hperl/exp/grpc-gateway

.schema/config.schema.json

@@ -311,10 +311,10 @@
       "enum": ["cpu", "mem", ""]
     },
     "log": {
-      "$ref": "https://raw.githubusercontent.com/ory/x/v0.0.496/logrusx/config.schema.json"
+      "$ref": "https://raw.githubusercontent.com/ory/x/v0.0.541/logrusx/config.schema.json"
     },
     "tracing": {
-      "$ref": "https://raw.githubusercontent.com/ory/x/v0.0.496/tracing/config.schema.json"
+      "$ref": "https://raw.githubusercontent.com/ory/x/v0.0.541/tracing/config.schema.json"
     },
     "namespaces": {
       "description": "Namespace configuration or it's location.",
@@ -347,8 +347,14 @@
                 "file:///etc/configs/keto_namespaces.ts",
                 "ws://my.websocket.server/keto_namespaces.ts"
               ]
+            },
+            "experimental_strict_mode": {
+              "type": "boolean",
+              "title": "Strict permission checking mode",
+              "description": "EXPERIMENTAL: If strict mode is enabled, then relation tuples for permits are not checked directly (but the rewrites are applied). Similarly, subject sets are only expanded if they were declared with SubjectSet<...>. These stricter rules result in much faster checks with fewer queries to the underlying database. The behavior of strict mode might change while it is experimental."
             }
           },
+          "additionalProperties": false,
           "required": ["location"]
         }
       ]