Add API_WHITELIST here (with the juicy stuff) and add the necessary permissions you'll need to use it in the public API.