AcmeResourceHandler is using String.matches(String) to check if it needs to handle a request, which results in per-request allocations.

At minimum this should use a precompile Pattern. That still results in per-request allocation of a Matcher though.