Despite having the delivery endpoint configured, the base @Path on the JcrDeliveryEndpoint cannot be changed at runtime.
The initial choice to leave out any base-path was to be less "opinionated"; but the lack of prefix makes it hard to open up default security role just for delivery.

In architecture meeting, we decided to re-add a base-path to start with.

@Path("/delivery/{workspace}/v1")
// or @Path("/content/{workspace}/v1")
class JcrDeliveryEndpoint