The Gateway opens the Internal Room. The Records Store still requires a scoped service identity. VPN membership is not authorization to data, and an SSRF bug in the Internal Room cannot dump the Records Store.