It should be P:89.212.242.33,23.236.58.114,W:127.0.0.1
My example:
"api-allow" : "P:23.236.58.114,89.212.242.33,W:127.0.0.1",
"api-groups" : "P:switchpool:addpool:removepool:restart:save:*",
Before i just had it as "W:89.212.242.33,127.0.0.1" and it worked without issue. I'm not sure whether to try this and risk another complaint, or just use LRP. D:
Edit - Actually maybe it worked this way because the LR IP was the first after the "W:". I will give your suggestion a try after all.
Cheers.