I have two services - let them be Manager and Worker.
The Worker should accept requests only from the Manager - no other services or users, ever. I need to secure the