If you really need, run a reverse proxy only on the /video endpoint. For I don't know how hardened the focus and automation control APIs are.