Trusted authenticated scope, never request-body data.
Trusted authenticated principal whose registered endpoints are visible.
Optional
Trusted authenticated scope, never request-body data.