Lock down your endpoints with user-level security permissions