- Securely expose site's composer.json via token-protected route - Securely expose site's composer.lock via token-protected route