[matwood]

I see. I read "Rest API" as securing the server portion with no implication that it meant only server to server. Cheers!