What challenge are you facing?

Recently, version 5.x addressed the issue #438, exposing the cc.xml file. Currently checking the feature, it seems this endpoint is under authentication, depending upon a cookie called skymarshal_auth.

What would make this better?

Would it be possible to expose this endpoint without this needed authentication?