Add auth_allowed parameter

I'd also probably say "An array of authenticated nodes allowed to access all catalog and node endpoints." or something.