We should secure these endpoints so not everyone can hit them.