I was reading a fine article on Data Protection API here.
With such in mind, I am thinking of encrypting the payload and require the Public Key to be shared among cli