Support IP whitelisting and basic HTTP authentication
Draft bolt-on HTTPS