#tantek(though it's possible they may rel=alternate to an HTML capability URL, more likely they'll rel=alternate to the "plain" HTML page, which if it works without auth to provide a rel=alternate link back to the feed, then the feed is likely public)