Hard coded protection config

IP address whitelisting settings are currently manually configurable by means of an ACF form. This is risky, as manual configuration mistakes may cause security issues. Also, when an IP address changes, it needs to be changed in each site individually.

To prevent this, (part of) this configuration needs to be hard coded in config expander or in a separate package.