A deployment requires a narrowly scoped security exception. What is the best handling approach?

1. Document justification, compensating controls and expiry
2. Approve it permanently without an owner
3. Suppress monitoring for all affected workloads
4. Disable the relevant protection for every namespace