As a maintainer I need to be able to restrict access to authorized users, to start with an option for http basic/digest will be sufficient.