canary: if you can read this while logged out, /m is NOT protected.