Expand on what is possible with path param for unless() and give link to express-unless so the user knows that is what is being utilized. (f13cd5f0d55154e551b11e872668879180979640)
Fixed multitenancy bug where if a secret is a buffer, it is incorrectly treated as a callback. Also provided a test which exercises this logic. (217474476b82d17bb39228ba7c07b8ea6e10df55)