code: public boolean isSubjectToMandatoryReadPermissionCheck(String restOfPath) {
          for (String name : ALWAYS_READABLE_PATHS) {
              if (restOfPath.startsWith(name)) {
                  return false;
              }
          }
  
          for (String name : getUnprotectedRootActions()) {
              if (restOfPath.startsWith("/" + name + "/") || restOfPath.equals("/" + name)) {
                  return false;
              }
          }
  
          // TODO SlaveComputer.doSlaveAgentJnlp; there should be an annotation to request unprotected access
          if (restOfPath.matches("/computer/[^/]+/slave-agent[.]jnlp")
              && "true".equals(Stapler.getCurrentRequest().getParameter("encrypt"))) {
              return false;
          }
  
          return true;
      }
docs: Test a path to see if it is subject to mandatory read permission checks by container-managed security
  @param restOfPath the URI, excluding the Jenkins root URI and query string
  @return true if the path is subject to mandatory read permission checks
  @since 2.37