fn secure_extract( source: IpSource, headers: &HeaderMap, extensions: &Extensions, ) -> Option<IpAddr>