But it says the lua script feature is open by default, so any authenticated (or 60k without auth) can run lua scripts -> use this RCE