Restrict access to everything, as everything is an API.