My Web Application Firewall is blocking HIBP. I assume I need to whitelist the IPs that HIBP API is using. They are on cloudflare.