CORE-4173: added some notes indicating why the unsecured /export-template/{template-id} and /export-app/{app-id} endpoints still exist