We have the ExtractProvisionerDaemonAuthenticated middleware : https://github.com/coder/coder/blob/main/coderd/httpmw/provisionerdaemon.go#L28 which is used while doing a call from a provisioner daemon and critical but lacks coverage - would need to improve this part and ensure it is well tested.