Merge changes I36f5f7cd,Idb69119a,I5740fea0 into main

* changes:
  Implement ALLOW_IF_VISIBLE opt-in
  Split checks for visibility and other exemptions
  Introduce BAL Configuration object