Access is gated client-side for a private link share — not a substitute for real auth on sensitive data.