Ensure all API requests require hmac authentication by default