How to keep /api/users endpoint off limits, but still allow filtering content by user?

Awesome! Thank you @GregorSondermeier!

But how would I use this to do the same on the user level? I guess there I can’t use createCoreRouter, as It would override all the existing `/user’ endpoints, right?