Signed API

For external use we offer an API that requires each request to be sent with a "signature" created using the request content and a timestamp. This makes each signature useful for a short time only and prevents possible replay attacks.