LPS-52011 - Explicitly default to view only permissions for guest
LPS-52011 - Explicitly check p_auth token