This is the best way to protect your APIs