== through traefik (https://files.enkisfelhom.hu, no files cookie), GET /api/users?id=self
forged header named X-Felhom-User -> HTTP 401 (user None)
forged header named RANDOM -> HTTP 401 (user None)
forged header named SECRET -> HTTP 401 (user None)
== from the bookstack container (on traefik-public), straight to http://filebrowser:80/api/users?id=self — no traefik
forged header named X-Felhom-User -> HTTP 401 (user None)
forged header named RANDOM -> HTTP 401 (user None)
== CONTROL: the same container with the box's REAL secret name (read from the box, never printed)
real secret name -> HTTP 200 (user felhom-household)