e.g. /rooms address with NO_AUTH would 500 despite showing in UI this fact doesnt impact our reflector but impacts self-deploys/documentation