Restricting the server api and controllers to only the calls that are needed.