secure stats-collector w/ request signature