private static boolean isAllowedConnector(ConnectorFactory cf) {
        return cf instanceof HostedSslConnectorFactory
                || cf.getClass().getSimpleName().endsWith("HealthCheckProxyConnector") // TODO(bjorncs, 2024-11-13): remove once migrated
                || cf.getClass().getPackageName().startsWith("com.yahoo.vespa.model.container.amender")
                || (cf.getListenPort() == Container.BASEPORT && cf.sslProvider() instanceof DefaultSslProvider);
    }
Enforces that Cloud applications cannot
1) override connector specific TLS configuration
2) add additional HTTP connectors

@author bjorncs
config-model/src/main/java/com/yahoo/vespa/model/application/validation/CloudHttpConnectorValidator.java