move the secure.wm conf before the *.wikimedia.org wildcard or that
matches first

Change-Id: Ia1b7eb7c59b2e0b4c0e638103dce24039af48ffc