When the UPS is using Kafka, we should make sure only the UPS can publish and consume from our topics, hence we need to figure out auth/authz for the project.
A quick search gave me these documents: