While it is locked behind authentication, there is no reason that the copilot webapp should be accessible to the public internet. We should establish network isolation so that APIView can continue to ...