This protects the builder. Your published AR experiences stay public — clients never need to log in.