XML-RPC endpoint is present. POST access remains protected.