I would certainly question the wisdom of exposing a public endpoint that gratns NS access, but that's beside the point.