restic used pprof for profiling which is enabled by starting an HTTP server with *net/http/pprof* imported. The /debug/pprof endpoint does not require any authentication and can be accessed by anonymous users. What if we want to hide it from a normal user??