Regardless of if and how the sender's accessible endpoint is provided to the recipient, it's important that this endpoint NOT contain sensitive access information. The recipient of the endpoint, regardless of the number of hops, must still be expected to authenticate to the sender's endpoint.

Existing Wording:

We are actively seeking input input on whether or not to document how to transmit endpoint data intended only for the immediate recipient (which may be the final recipient or an intermediary) recipient of the operation and to provides the recipient with the technical details for getting additional information from the medical record for the alert - Note that this has serious security implications as it may contain sensitive access information.