Bug 922166 - add protected search route that surfaces 'unpublished' makes. A valid Hawk Authentication header must be supplied to use the route.