Indicates whether the operation is public, if false a user must provide an Authorization header with an Bearer access token