When true, traffic to and from users AAA hasn't responded about at all — unidentified users — is allowed; when false, it's blocked. This is specifically about the 'no answer yet' population tracked by cssgTalUnidentifiedUsers, as opposed to cssgTalDropPakDuringAuthorization which covers users still legitimately waiting on a normal in-flight request; a network that wants to fail safe during a AAA outage would set this false so the outage blocks traffic rather than silently letting everyone through unidentified. During a AAA outage, a network with cssgTalUnidentifiedUserAllowTraff set to false would see legitimate subscribers unable to pass traffic until AAA recovers, trading availability for the assurance that no unidentified traffic slips through in the meantime.