Sign the request with a nonce so the endpoint can't be abused willy-nilly