it's not that is "secure", it's that the client has authenticated himself. so maybe it should be isAuthenticatedUserAuthorized(....)