Fix: Require auth for cb.rpc.run