Those endpoints reveal internals, so they belong on a loopback or admin listener, not on the public mux.