secured API with token, own pipelines now