... so that operators can hide the healthcheck endpoint, which is
usually deployed without any auth mechanism, from users accessing
APIs through front-end load balancer or reverse proxy.
Note that this behavior is optional and can be enabled by
the new option.
Change-Id: Ib87da1b3d231dea44939686af544db101d68e179