Security test route
Dynamic and never cached. A future zone-level rule can apply Managed Challenge here.