Clientless access requires the following access security: