Bootcamp integrations. /app authenticates, /api denies, /public is open.