The setting for allow kind, allows these kinds through bypassing the npub lists .. just fyi.. that's how that setting works. Since you have kind1 in there, it will still allow all kind1s. If your app needs this kind, yeah the pubkey management api might be the best option.