GetEndpoints shall not return endpoint with no user token policy available
The GetEndpoints service shall never return an endpoint with no UserTokenPolicies available since it shall be possible to establish a session on those endpoints.
OPC UA specification part 4 (v1.03) §5.4.4 GetEndpoints:
This Service returns the Endpoints supported by a Server and all of the configuration information required to establish a SecureChannel and a Session.