Insecure change to only route onion addresses over Tor