No security. Maybe binding it to localhost and using squid as a frontend with authentication would work?