Executor: restrict access to REST API with configurable pre-shared secret/nonce