I want to grant Flink API access only to services that send a recognised authorization header. Is that a configurable option or would I need to place a proxy in front of the jobmanager?