[lucisferre]

Your security should always be behind the API not in front of it and you should never rely on obscurity as a security measure.