Security Plugin: set http status for URL rule match