“If you ask to get a document that you're not allowed to, you're not supposed to get it.”

Transcript evidence from Erez Yalon — The OWASP API Security Project.