recently one of the customers asked for pf9 URLs in order to whitelist them in the customer's firewall. Customers do expect to keep the whitelist URLs to minimum.

With that in mind I suggest that we keep pf9ctl on the management plane to reduce the number of URLs in whitelisting.