Hi. Would it be possible to add an admin rest API via building a SPI? If so, any doc/resource I should check? I played with the REST resource SPI under example directory. However, it is not protected yet. What mechanism can I take to protect the newly added API? Thanks! Yegui