Protect /result endpoint, since the worker supports HTTP auth