Surety v2 — see /healthz, /readyz, /api/relay/*