Another scenario is using the NSE to enrich the notification via a call to a server. I want to use the same API endpoint for my main app and my NSE, but only one of those supports AppAttest so I may have to remove auth for that endpoint.