Support more ways to limit access to the HTTP API.
Support more ways to limit access to the HTTP API.