Remote forest endpoint, narrow access