ns-static-assets — public /vendor/* (leaflet); fleet requires auth