Currently, authentication and authorization are enabled on the EPP metrics server by default. However, in certain scenarios—such as local testing—it may be desirable to access the metrics endpoint without authentication.

To address this, we can introduce a flag --metrics-auth, which is enabled by default. Users can disable it explicitly when needed.