So like a semi-public endpoint, that the libraries can access but not the general public, and then the public should get it from the libraries? Seems roundabout but it fits with what I've read so far