Permit only when the embedding product marked the session/profile/remote as allowlisted in TerminalClipboardPolicy.