@wpmark People that say hiding it helps against brute force do realize that if you hide it to anything logical for your users then it’s simple for the brute force attacks to try those as well. Not mention that well placed traffic analysis can reveal the URLs your users are using.