Added client (IP) authentication too, therefore you can configure an additonal layer of security by adding  list of allowed API clients IP addresses to a list of allowed IP addresses (in the powergate.php configuration file.)