#1135 Added optional API authorization to the new public-facing compatible ones (only if calling same domain as api_key owner)