Passing an empty string won't always return all public gists.  If the call is authenticated, it will return all gists for the authenticated user.  I have no idea why they didn't make that URL `/user/gists` like they do on other endpoints, but whatever.  Comment here should be updated to reflect this.