Enforce deny-by-default approach on the admin listener by matching on exact paths and on GET requests

Enforce deny-by-default approach on the admin listener by matching on exact paths and on GET requests #10210