In swagger.yaml - note use of x-mojo-privilege
key under the route method, leave this blank for routes that don't require a privilege to access:
paths:
/foo:
get:
x-mojo-controller: "MyApp::API::Foo"
x-mojo-around-action: "MyApp::API::check_api_priv"
x-mojo-privilege: "get:foo"
operationId: get