A hardened proxy protects the main admin route and an internal DAV alias still permits writes

A proxy looks hardened and a legacy authoring endpoint still accepts writes through one alias path.