Jean-Pierre van Melis wrote:[...]

They don't have to - pound supports global Service directives that exist 
outside ListenHTTP(S) directives.
[...]

Yes, pound uses a strict first-match algorithm.
[...]

Simply set a 'Service' block without any HeadRequire directives as your 
last entry in the cfg file, and it'll serve as a catchall.   Thats 
basically how my config works, I have a default policy and then 
specific, per-vhost overrides appear above it.

PS - I've CC'ed the list since this is still of general interest.

Good luck![...]