This prevents leakage of project names on an endpoint which is
unauthenticated and thus open to the world.