Two questions:

* From a security point of view: With the sidecar approach a simple port misconfiguration can remove the authentication. Is this a good idea?

* The egress container cannot propagate the original token used while calling the API. So the authentication is at this point only an authentication of the first backend service being allowed to call the second backend service (with a new token). This makes authorization checks for the original caller (or any operation relying on the data from the token) in the second service impossible. Or am I missing something?