A protected layout can perform an auth check and render Outlet when access is allowed, letting protected child routes appear inside it.