mkt/nginx: whitelist apps/category