Enabling the [allow-list](https://hasura.io/docs/1.0/graphql/core/deployment/allow-list.html) is highly recommended when running the GraphQL engine in production. I wonder how do you handle this when making use of the generated generic queries?