extension forced public context if IP is in ACL