Users can specify a username and a snippet URL. The GitLab instance's domain can be inferred from the URL.
The snippet API appears to be unauthenticated, e.g. https://gitlab.com/api/v4/snippets/2364183
Once we verify that the gist owner matches the username specified, we can do something similar to GitHub Gist (check file content).