added endpoint restriction config