When set, /metrics requires Authorization: Bearer <token>.
/metrics
Authorization: Bearer <token>
final String? token;