@yuhunglin @shacker I think hiding the feature on the front end is sufficient. With the backend still visible to those who know the URL we have an endpoint to use for testing.