public static boolean hasHandlerThatNeedsProtection(ApplicationContainerCluster cluster) {
        return cluster.getHandlers().stream()
                .anyMatch(handler -> ! isExcludedHandler(handler) && hasNonMbusBinding(handler));
    }
all handlers (that are known by the access control components) *
config-model/src/main/java/com/yahoo/vespa/model/container/http/AccessControl.java