Place the 2nd target access check under DAST control

Follow up on gitlab-org/security-products/dast!312 (comment 419295880)