secure API and route indexes