This route is intentionally unprotected for this stage, but the UI marks it as private. Cloudflare Access will guard it later.