A single rewrite rule, the kind pasted into NGINX configurations thousands of times a day, can hand an unauthenticated ...