I think that is by design https://konghq.com/blog/enterprise/api-mandate