Hide sensitive routes in courses-api