vehicle API security