Provide a list of allowed controller/methods, one per line.
Provide a list of allowed routes in the format "HTTP-METHOD /route/", one per line.