1) all the filters should take care of a bypass configuration. this is important for chaining multiple cache/security filters

2) the bypass configuration should not use a comma separated list but a node per entry (make the configuration bootstrapable)