All built-in endpoints are unprotected.