property RouteSecurityMetadata.authenticated true when the middleware requires an authenticated principal; false when it explicitly marks the route public. Type boolean