cdx-server: for now, don't allow host/domain access if all url key is not available