I'm a little confused. If the / context is already proxying everything to vaultwarden_backend, and you want to add another context for /admin to whitelist specific IPs, is that correct? If so, you may want to use another proxy context rather than a static context.