Whitelist the CDN servers, if there is ACL on the origin