secure customer endpoint