I think this is not supported. The other workaround is to use PERMISSIVE mode in the PeerAuthN on the port, but this means a cluster request in plaintext is also allowed.
Also note Istio 1.6 is no longer supported: Istio / Support for Istio 1.6 has ended