Is there any documentation or examples on how to secure a worker so that it only accepts calls from authenticated clients/users?