This document provides guidelines for deploying OPA inside untrusted