From Spring Cloud Brixton on, the PreDecorationFilter doesn't pass sensitive headers downstream. So the ZuulProperties from the ApplicationContext needs to be used (instead of creating a new instance), so that the properties can be customized.