A consent handler that denies all requests for external resource access. This is the default, production-safe handler.