Protect scheduler REST endpoints