I can do what I want with a filter and then just have the security stuff for swagger but I then I have to differentiate routes in the filter. I have multiple contracts in this service.