https://docs.nginx.com/nginx/admin-guide/security-controls/configuring-subrequest-authentication/