right now, you need 2 relays for that. To protect the 1059s.. You can set your relay to allow all 1059s, but without AUTH (restricting reads) it won't protect it properly. This is a limitation with relay tools interceptor-proxy until I front every relay with the proxy in mixed mode, a bit more coding. This is elevating on my priority list though because i hate the unprotec 1059s.