This PR fixes plugin ordering so ACL checks run before cache lookups, preventing blocked clients from receiving cached DNS answers populated by allowed clients Signed-off-by: Yong Tang <yong.tang.github@outlook.com>