{
  "__auth": { "token": "s3cret" },
  "feature": "auth gate",
  "data": "top secret — needs Authorization: Bearer s3cret"
}