Python API security