It's true for `getClientIps()`, but `getClientIp()` should return the most trusted address, thus the last in the list returned from `getClientIps()`. So either this line should be reverted, or `getClientIp()` should be updated.