enforce mode is refused while the caller's own address is outside the list: add it first
set_ip_allowlist
