Pretty sure ApiController does skip_protect_beta