Only forward auth to trusted locations Upstream-commit: cedab4d06a6e74d6567799ac4ad494884a8a9b13 Component: engine