only check allow_hosts if plugin matches route