add recon modules for unauthenticated annotation servers that leak projects or config without a key: cvat and label studio.