Mixer provides a [CheckRequest api](https://istio.io/docs/reference/api/mixer/mixer-service.html#checkrequest) that linkerd can use to enforce ACLs, whitelists, etc.