The comment claimed 'gateway-key-gated'; v1.97.0 actually gates auth=true passthrough routes on per-key metadata allowed_passthrough_routes (OSS path, not Enterprise), 401 unauthenticated. Grants applied live via /key/update for all-agents-local and the worldtree gateway key; comment-only change here, picks up with the next conf deploy.