Require authentication before making API calls

Otherwise anything might access the bus.