Great, thanks for the quick response. I will implement the allowlist accordingly 
Another thing I saw is the new app usage page which does not show Active Objects Tables and REST API Calls for my app. But my app performs REST API calls to its own API Endpoints on very page view and user interaction. The app also has four AO tables.
It says:
- “0 REST API calls made by 0 users”
- “0 database tables”
Is this an early preview feature and it is not working because of that, or is something wrong with the app?