Security labSSRFA URL-fetching endpoint has no validation. Use it to reach an internal metadata service.