access control is determined by the metadata of a page.
for most use cases you can easily set the necessary metadata in the auth tab.
the following metadata paths are relevent:
/peek/public
/poke/public
the values of these paths should be boolean 'flags'.
that is, a $dime where the aura is %f and the value is either .y or .n