I would love to know this too! How to protect the collector endpoints when client observability is desired?