[billhathaway]

For customers with stronger security concerns, they could issue your service a client cert and only allow replication connections from your service's IP range that auth with certificate.

[AznHisoka]

Seems like so much hassle and energy.. Which could be used to back it all up yourself.