Approved exclusions from auditing. Endpoint exceptions cover one endpoint, an API root URL or a path pattern like /api/Student/*. Host exceptions take a whole host out of auditing. Both apply only while active and not expired.