- Spell out T&C
- logged in users
- excluding a set of whitelisted endpoints