Adding a routing prefix could solve the issue. Example:

```yaml
# Resources/config/suggested/idci_exporter_routing.yml

idci_exporter:
    resource: "@IDCIExporterBundle/Controller/ApiController.php"
    type: annotation
    prefix: exporter
```

This way the pattern won't be *api/query/etc.* but *exporter/api/query/etc.*,  and won't be covered by the firewall.