HTTP access codes control access

401 - not allowed, i dont know who you are
402 - payment is required
403 - i know who you are but you cant access

Encryption is optional, same as nostr.