/csm.vcf: authorization required.