Are there any plans to add authentication for the HTTP API when running in TCP mode? It looks like the Unix socket mode relies on system-level permissions (which is great), but TCP mode seems wide open unless wrapped externally (e.g. behind a reverse proxy or firewall).