To minimize exposed surface I wanted to block default hauk url that does not have any reference to a particular endpoint document.

Like https://apps.varden.info/demo/hauk/ is blocked
but https://apps.varden.info/demo/hauk/?2HFB-4KOS allowed

Is that good idea?