Should be if the header IS NOT present AND the route is in the whitelist.