Thank you for the heads up on revanced. I’ve been using NewPipe, and while it works very well, I like that revanced provides a more genuine YT experience.

For restricted access, I add a Cloudflare Application in front of the Tunnel to provide authentication. Work’s like a charm, and the user never hits my services unless they successfully authenticate.