Only allow access to nominated endpoints in config