A filter used to restrict access to the server: the server
should only be available from a loopback connection, and
if an access token is specified, then the request should
include the access token header.
Returns the list of properties which should be read
before resolving an expression: this can be used if the resolver
itself needs some configuration properties.