v prove x-bound-auth header is optional
- prove idempotencyKey is optional