Add X-Cluster-Client-IP generated from NSM as yet another possible source of the real client IP