Hi,
at the moment it is only possible to restrict the API for IP access.
It would be good to restrict the API also for commands
Currently, the API allows all commands as soon as it has been activated. You should keep this state and then say that you want to limit the API. As soon as the limit function has been activated, everything is prohibited for the time being, now the individual functions must be enabled.