allow controller flow with only specific honeypot (no scope), fix docs