reason

The PolicyVerdict.Veto.reason the policy gave, suitable as a low-cardinality metrics tag.