legitimacy.endpoint-only-insufficient → legitimacy.endpoint-only-insufficient